H
Houseable.ai

Houseable.ai — Privacy Policy

Last updated: August 16, 2026

**Status: DRAFT — not yet reviewed by a lawyer. See LEGAL_REVIEW_CHECKLIST.md

before publishing or shipping to the App Store.**

Houseable.ai ("Houseable", "we", "us") builds a persistent record for a

physical home. This policy explains what we collect, why, where it lives, and

what you can make us do with it.


1. The short version

choose to record about your home.

record with anyone you have not explicitly given access to.

and survive a lost phone.


2. What we collect

2.1 Account information

DataWhyRetention
Email addressSign in; account recovery; notifying you about your accountUntil you delete your account
PasswordSign inStored only as a salted PBKDF2-SHA256 hash — we cannot read it
Session tokenKeeping you signed inExpires after 90 days or when you sign out

We do not collect your name, phone number, date of birth, government ID,

or payment details at signup.

2.2 Home record content

Everything you enter about your property: address and property details,

equipment and appliances, smart-home devices and what must happen to their

accounts at handoff, repair and maintenance history, documents, service

providers, photos you take, and maintenance schedules.

This is the product. We store it so it syncs across your devices and survives

a transfer to the next occupant.

2.3 Photos

Photos you take of equipment or manuals are currently stored **only on your

device**. They are not uploaded to our servers in this version. If and when

cloud photo storage ships, this policy will be updated before it is enabled,

and you will be told in the app.

2.4 The Houseable Home Email

Each home may be issued a permanent email address at our domain. If you use

it to register devices or warranties, mail sent to that address is stored in

your home record so you can read it in the app. Treat it as belonging to the

property, not to you personally — it is designed to outlive your occupancy,

and a future occupant with access to that home will be able to see mail sent

to it after the transfer. Do not use it for personal correspondence.

2.5 What we do NOT collect

to move an account, never the credentials themselves.

device.

health, or financial data.


3. Legal bases (GDPR / UK GDPR)

For users in the EEA and UK, we process personal data on these bases:

you signed up for.

limiting), balanced against your rights.

and can revoke in iOS Settings at any time.


4. Where your data lives

the app works offline.

with a Cloudflare D1 database. Cloudflare acts as our data processor.

Data may be stored and processed in the United States and other regions

where Cloudflare operates.

We do not use any other third-party processors. There are no analytics SDKs,

crash reporters, or advertising networks in this app.


5. Who can see your home record

you grant them. Permissions are enforced on our server, not merely hidden in

the app — a member with no Smart Home access is never sent that data at all.

irreversible from your side: after it, they hold access to the home record,

including its history and any mail at the home address.

abuse, or comply with a valid legal order.

We will never sell, rent, or trade your data, and we do not use your home

record to train machine-learning models.


6. Your rights and how to use them

You may, at any time:

local supervisory authority.

To export or delete: use *Settings → Erase All Data* in the app for your home

record, or email the address in §10 for full account deletion. We action

deletion requests within 30 days and confirm when complete.


7. Data retention

days after deletion.


8. Security

store or transmit them in plaintext.

your permissions.

No system is perfectly secure. If we ever discover a breach affecting your

personal data, we will notify affected users and the relevant authorities as

required by law, without undue delay.


9. Children

Houseable is not directed at children and is not intended for anyone under 13

(or under 16 in the EEA/UK). We do not knowingly collect data from children.

If you believe a child has given us data, contact us and we will delete it.


10. Contact

Questions, requests, or complaints:

privacy@houseable.ai

We aim to respond within 5 business days and to resolve requests within 30

days.


11. Changes to this policy

If we make a material change — especially one that expands what we collect or

who can see it — we will notify you in the app before it takes effect. The

"last updated" date above always reflects the current version.